CVE-2025-24180

The issue was addressed with improved input validation

High · published March 31, 2025

CVSS v3.1
8.1
EPSS
1%
Percentile
63.1
In the wild
Unconfirmed
What it is

The issue was addressed with improved input validation. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, watchOS 11.4. A malicious website may be able to claim WebAuthn credentials from another website that shares a registrable suffix.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.01020 · 63.1th percentile
Published
2025-03-31T22:23Z
EPSS history
Timeline
  • 31 MAR 22:23Z
    The issue was addressed with improved input validation
    cvelistv5